Oval Definition:	oval:org.opensuse.security:def:53020
Revision Date: 2020-12-01 Version: 1 Title: Security update for php7 (Moderate) Description: This update for php7 fixes the following issues: - CVE-2020-7068: Use of freed hash key in the phar_parse_zipfile function (bsc#1175223). - Do not install outdated README.SUSE (bsc#1174010). - Added tmpfiles.d for php-fpm to provide a base for a socket (bsc#1173786). Family: unix Class: patch Status: Reference(s): 1044231 1051510 1051858 1056686 1060463 1065600 1065729 1071995 1083647 1085030 1103990 1103992 1104353 1104745 1109837 1109911 1111666 1111974 1112178 1112374 1113956 1114279 1114685 1118338 1119680 1120386 1127611 1133021 1134090 1136157 1136333 1137325 1141895 1142685 1144333 1145051 1145929 1146539 1148868 1156510 1157424 1158187 1158983 1159037 1159198 1159199 1159285 1160659 1161561 1161951 1162171 1162929 1162931 1163403 1163897 1163971 1164078 1164284 1164507 1164705 1164712 1164727 1164728 1164729 1164730 1164731 1164732 1164733 1164734 1164735 1164777 1164780 1164893 1165019 1165111 1165182 1165185 1165211 1165404 1165488 1165527 1165741 1165813 1165823 1165873 1165929 1165949 1165950 1165980 1165984 1165985 1166003 1166101 1166102 1166103 1166104 1166632 1166658 1166730 1166731 1166732 1166733 1166734 1166735 1166780 1166860 1166861 1166862 1166864 1166866 1166867 1166868 1166870 1166940 1166982 1167005 1167216 1167288 1167290 1167316 1167421 1167423 1167627 1167629 1168075 1168202 1168273 1168276 1168295 1168367 1168424 1168443 1168486 1168552 1168760 1168762 1168763 1168764 1168765 1168829 1168854 1168881 1168884 1168952 1169013 1169057 1169307 1169308 1169390 1169514 1169625 1173786 1174010 1175223 866728 867943 871792 879607 883026 937787 950944 954864 955647 956716 956829 957162 957174 958315 958789 961721 962736 962737 962738 962739 982178 CVE-2008-0928 CVE-2008-1945 CVE-2008-2382 CVE-2008-4539 CVE-2009-1892 CVE-2010-2156 CVE-2010-3611 CVE-2010-3616 CVE-2011-0413 CVE-2011-0997 CVE-2011-2748 CVE-2011-2749 CVE-2011-4539 CVE-2011-4868 CVE-2012-0035 CVE-2012-2369 CVE-2012-3515 CVE-2012-3570 CVE-2012-3571 CVE-2012-3954 CVE-2012-3955 CVE-2013-2266 CVE-2013-4148 CVE-2013-4149 CVE-2013-4150 CVE-2013-4151 CVE-2013-4526 CVE-2013-4527 CVE-2013-4529 CVE-2013-4530 CVE-2013-4531 CVE-2013-4533 CVE-2013-4534 CVE-2013-4535 CVE-2013-4536 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2013-4541 CVE-2013-4542 CVE-2013-4544 CVE-2013-6370 CVE-2013-6371 CVE-2013-6399 CVE-2014-0142 CVE-2014-0143 CVE-2014-0144 CVE-2014-0145 CVE-2014-0146 CVE-2014-0147 CVE-2014-0150 CVE-2014-0182 CVE-2014-0222 CVE-2014-0223 CVE-2014-1344 CVE-2014-1384 CVE-2014-1385 CVE-2014-1386 CVE-2014-1387 CVE-2014-1388 CVE-2014-1389 CVE-2014-1390 CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2014-9761 CVE-2015-0797 CVE-2015-1779 CVE-2015-2330 CVE-2015-3209 CVE-2015-3456 CVE-2015-4037 CVE-2015-4792 CVE-2015-4802 CVE-2015-4807 CVE-2015-4815 CVE-2015-4826 CVE-2015-4830 CVE-2015-4836 CVE-2015-4858 CVE-2015-4861 CVE-2015-4870 CVE-2015-4913 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5969 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7547 CVE-2015-8345 CVE-2015-8605 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779 CVE-2015-8833 CVE-2016-1521 CVE-2016-1523 CVE-2016-1526 CVE-2016-1601 CVE-2016-5118 CVE-2016-9843 CVE-2017-5436 CVE-2018-7999 CVE-2019-19768 CVE-2019-19770 CVE-2019-3701 CVE-2019-9458 CVE-2020-10942 CVE-2020-11494 CVE-2020-11669 CVE-2020-2732 CVE-2020-7068 CVE-2020-8647 CVE-2020-8649 CVE-2020-8834 CVE-2020-9383 SUSE-SU-2015:0688-1 SUSE-SU-2016:0296-1 SUSE-SU-2016:0459-1 SUSE-SU-2016:0471-1 SUSE-SU-2016:1570-1 SUSE-SU-2020:1087-1 SUSE-SU-2020:2455-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 SUSE Linux Enterprise Module for Public Cloud 15 SP1 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND libass9-0.14.0-lp150.1 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information libvirt-5.1.0-lp151.7.3 is installed OR libvirt-admin-5.1.0-lp151.7.3 is installed OR libvirt-bash-completion-5.1.0-lp151.7.3 is installed OR libvirt-client-5.1.0-lp151.7.3 is installed OR libvirt-daemon-5.1.0-lp151.7.3 is installed OR libvirt-daemon-config-network-5.1.0-lp151.7.3 is installed OR libvirt-daemon-config-nwfilter-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-interface-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-libxl-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-lxc-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-network-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-nodedev-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-nwfilter-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-qemu-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-secret-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-core-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-disk-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-gluster-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-iscsi-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-logical-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-mpath-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-rbd-5.1.0-lp151.7.3 is installed OR libvirt-daemon-driver-storage-scsi-5.1.0-lp151.7.3 is installed OR libvirt-daemon-hooks-5.1.0-lp151.7.3 is installed OR libvirt-daemon-lxc-5.1.0-lp151.7.3 is installed OR libvirt-daemon-qemu-5.1.0-lp151.7.3 is installed OR libvirt-daemon-xen-5.1.0-lp151.7.3 is installed OR libvirt-devel-5.1.0-lp151.7.3 is installed OR libvirt-devel-32bit-5.1.0-lp151.7.3 is installed OR libvirt-doc-5.1.0-lp151.7.3 is installed OR libvirt-libs-5.1.0-lp151.7.3 is installed OR libvirt-lock-sanlock-5.1.0-lp151.7.3 is installed OR libvirt-nss-5.1.0-lp151.7.3 is installed OR wireshark-plugin-libvirt-5.1.0-lp151.7.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information MozillaFirefox-24.8.0esr-0.8 is installed OR MozillaFirefox-translations-24.8.0esr-0.8 is installed OR libfreebl3-3.16.4-0.8 is installed OR libfreebl3-32bit-3.16.4-0.8 is installed OR libsoftokn3-3.16.4-0.8 is installed OR libsoftokn3-32bit-3.16.4-0.8 is installed OR mozilla-nspr-4.10.7-0.3 is installed OR mozilla-nspr-32bit-4.10.7-0.3 is installed OR mozilla-nss-3.16.4-0.8 is installed OR mozilla-nss-32bit-3.16.4-0.8 is installed OR mozilla-nss-tools-3.16.4-0.8 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP4 is installed AND Package Information augeas-0.9.0-3.17 is installed OR libaugeas0-0.9.0-3.17 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information libjavascriptcoregtk-1_0-0-2.4.8-16 is installed OR libjavascriptcoregtk-1_0-0-32bit-2.4.8-16 is installed OR libjavascriptcoregtk-3_0-0-2.4.8-16 is installed OR libwebkit2gtk-3_0-25-2.4.8-16 is installed OR libwebkitgtk-1_0-0-2.4.8-16 is installed OR libwebkitgtk-1_0-0-32bit-2.4.8-16 is installed OR libwebkitgtk-3_0-0-2.4.8-16 is installed OR libwebkitgtk2-lang-2.4.8-16 is installed OR libwebkitgtk3-lang-2.4.8-16 is installed OR typelib-1_0-JavaScriptCore-3_0-2.4.8-16 is installed OR typelib-1_0-WebKit-3_0-2.4.8-16 is installed OR webkitgtk-2.4.8-16 is installed OR webkitgtk3-2.4.8-16 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND Package Information qemu-2.3.1-5 is installed OR qemu-block-curl-2.3.1-5 is installed OR qemu-ipxe-1.0.0-5 is installed OR qemu-kvm-2.3.1-5 is installed OR qemu-seabios-1.8.1-5 is installed OR qemu-sgabios-8-5 is installed OR qemu-tools-2.3.1-5 is installed OR qemu-vgabios-1.8.1-5 is installed OR qemu-x86-2.3.1-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND Package Information dhcp-4.3.3-9 is installed OR dhcp-client-4.3.3-9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information emacs-24.3-19 is installed OR emacs-info-24.3-19 is installed OR emacs-x11-24.3-19 is installed OR etags-24.3-19 is installed Definition Synopsis SUSE Linux Enterprise Module for additional PackageHub packages 15 SP1 is installed AND Package Information php7-7.2.5-4.61 is installed OR php7-embed-7.2.5-4.61 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 15 SP1 is installed AND Package Information kernel-azure-4.12.14-8.30 is installed OR kernel-azure-base-4.12.14-8.30 is installed OR kernel-azure-devel-4.12.14-8.30 is installed OR kernel-devel-azure-4.12.14-8.30 is installed OR kernel-source-azure-4.12.14-8.30 is installed OR kernel-syms-azure-4.12.14-8.30 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information evince-3.10.3-1 is installed OR evince-lang-3.10.3-1 is installed OR libevdocument3-4-3.10.3-1 is installed OR libevview3-3-3.10.3-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kernel-default-3.12.74-60.64.48 is installed OR kernel-default-base-3.12.74-60.64.48 is installed OR kernel-default-devel-3.12.74-60.64.48 is installed OR kernel-default-man-3.12.74-60.64.48 is installed OR kernel-devel-3.12.74-60.64.48 is installed OR kernel-macros-3.12.74-60.64.48 is installed OR kernel-source-3.12.74-60.64.48 is installed OR kernel-syms-3.12.74-60.64.48 is installed OR kernel-xen-3.12.74-60.64.48 is installed OR kernel-xen-base-3.12.74-60.64.48 is installed OR kernel-xen-devel-3.12.74-60.64.48 is installed OR kgraft-patch-3_12_74-60_64_48-default-1-2 is installed OR kgraft-patch-3_12_74-60_64_48-xen-1-2 is installed OR kgraft-patch-SLE12-SP1_Update_17-1-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information alsa-1.0.27.2-11 is installed OR alsa-docs-1.0.27.2-11 is installed OR libasound2-1.0.27.2-11 is installed OR libasound2-32bit-1.0.27.2-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND wpa_supplicant-2.6-15.10 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information xen-4.7.6_02-43.36 is installed OR xen-doc-html-4.7.6_02-43.36 is installed OR xen-libs-4.7.6_02-43.36 is installed OR xen-libs-32bit-4.7.6_02-43.36 is installed OR xen-tools-4.7.6_02-43.36 is installed OR xen-tools-domU-4.7.6_02-43.36 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kernel-default-4.4.121-92.95 is installed OR kernel-default-base-4.4.121-92.95 is installed OR kernel-default-devel-4.4.121-92.95 is installed OR kernel-default-man-4.4.121-92.95 is installed OR kernel-devel-4.4.121-92.95 is installed OR kernel-macros-4.4.121-92.95 is installed OR kernel-source-4.4.121-92.95 is installed OR kernel-syms-4.4.121-92.95 is installed OR kgraft-patch-4_4_121-92_95-default-1-3.4 is installed OR kgraft-patch-SLE12-SP2_Update_25-1-3.4 is installed OR lttng-modules-2.7.1-9.6 is installed OR lttng-modules-kmp-default-2.7.1_k4.4.121_92.95-9.6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND Package Information ibus-chewing-1.4.14-4 is installed OR ibus-pinyin-1.5.0-11 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information java-1_8_0-openjdk-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-demo-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-devel-1.8.0.222-27.35 is installed OR java-1_8_0-openjdk-headless-1.8.0.222-27.35 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information curl-7.37.0-37.43 is installed OR libcurl4-7.37.0-37.43 is installed OR libcurl4-32bit-7.37.0-37.43 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND shadow-4.2.1-27.19 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information augeas-1.2.0-17.3 is installed OR augeas-lenses-1.2.0-17.3 is installed OR libaugeas0-1.2.0-17.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND Package Information containerd-0.2.4+gitr565_0366d7e-9 is installed OR docker-1.12.3-81 is installed OR runc-0.1.1+gitr2816_02f8fa7-9 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND python-urllib3-1.16-3.6 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND slf4j-1.7.12-3.3 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND Package Information libdcerpc-binding0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc-binding0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libdcerpc0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-krb5pac0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-krb5pac0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-nbt0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-nbt0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-standard0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr-standard0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libndr0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libnetapi0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libnetapi0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-credentials0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-credentials0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-errors0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-errors0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-hostconfig0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-hostconfig0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-passdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-passdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamba-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamdb0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsamdb0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbconf0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbconf0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbldap0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libsmbldap0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libtevent-util0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libtevent-util0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libwbclient0-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR libwbclient0-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-client-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-client-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-doc-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-libs-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-libs-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-winbind-4.6.16+git.174.c2fd2e28c84-3.49 is installed OR samba-winbind-32bit-4.6.16+git.174.c2fd2e28c84-3.49 is installed
BACK